GRC Lead

BOSS ERP Consulting; Warrington; Hybrid; GBP 78,000 - 106,000; Part time

Job summary

BOSS ERP Consulting is seeking a GRC Lead contractor to oversee supplier cyber risk within a SIAM framework from Manchester on a hybrid basis (80% remote, 20% onsite). The initial 6-month contract can extend.

Candidates must be British citizens with active SC clearance and have not left the UK more than 28 days in the last 5 years. Responsibilities include identifying, assessing, recording, tracking and escalating risks; governing risk acceptance; coordinating supplier compliance; and producing

Qualifications

• Oversee cyber security risks across suppliers.
• Identify, assess, record, track and escalate risks.
• Govern risk acceptance and exception management processes.
• Coordinate risk-informed prioritisation across security disciplines.

Responsibilities

• Maintain oversight of cyber security risks across suppliers
• Ensure risks are identified, assessed, recorded, tracked & escalated appropriately
• Govern risk acceptance and exception management processes
• Support risk-based prioritisation across security disciplines
• Coordinate supplier compliance activities within the SIAM framework
• Validate supplier adherence to agreed security requirements
• Monitor security performance against contractual obligations
• Drive governance maturity improvements across supplier landscape
• Identify opportunities to improve risk management and compliance processes

Skills

GRC leadership

Cyber security

Risk management

Supplier governance

ISO 27001

NIST CSF

Security reporting

Stakeholder communication

Tools

SIAM framework

Job description

CONTRACTOR MUST BE SC CLEARED (active) British citizen

The candidate hasn't been outside the UK for more than 28 consecutives days during the last 5 years

Role Title: GRC Lead

Location: Manchester | Hybrid 80% remote 20% onsite

Duration: 6 initial months contract - possible extension

Day Rate: £500 Inside IR35

Role Description:

• Maintain oversight of cyber security risks across suppliers
• Ensure risks are: Identified, Assessed, Recorded, Tracked & Escalated appropriately
• Govern risk acceptance and exception management processes
• Support risk-based prioritisation across security disciplines
• Coordinate supplier compliance activities within the SIAM framework
• Validate supplier adherence to agreed security requirements
• Monitor security performance against contractual obligations
• Drive accountability for control weaknesses, non-compliance, and improvement actions
• Maintain visibility of compliance obligations and control requirements
• Support compliance against frameworks and standards such as:
• ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles
• Coordinate remediation of identified compliance gaps
• Produce consolidated security governance reporting
• Provide visibility of: Security risks, Compliance status, Control effectiveness, Supplier performance & Assurance findings
• Present governance information to client stakeholders and governance forums
• Support strategic planning and risk-informed decision making
• Drive security governance maturity improvements across the supplier landscape
• Identify opportunities to improve: Risk management, Compliance processes & Assurance effectiveness
• Security governance practices
• Support continuous improvement programmes across the cyber security operating model
• Facilitate cross-supplier resolution of governance issues